Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/dp4YlQrNcQPsBoWLup0FmtW_Hgg.roa
File: dp4YlQrNcQPsBoWLup0FmtW_Hgg.roa (raw, json)
Hash identifier: Jlcwu4fAyEeWEH0ofcQ9U/RrFQX7eGmmgQbAdsvthoM=
Subject key identifier: 76:9E:18:95:0A:CD:71:03:EC:06:85:8B:BA:9D:05:9A:D5:BF:1E:08
Certificate issuer: /CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Certificate serial: 01856F7959B3AFB07C619AD91ED1F0F351D8
Authority key identifier: 81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/dp4YlQrNcQPsBoWLup0FmtW_Hgg.roa
Signing time: Sun 01 Jan 2023 22:35:01 +0000
ROA not before: Sun 01 Jan 2023 22:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2001:678:d44:300::/64 maxlen: 64
2001:678:d44:200::/64 maxlen: 64
2001:678:d44::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:59:b3:af:b0:7c:61:9a:d9:1e:d1:f0:f3:51:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Validity
Not Before: Jan 1 22:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=769e18950acd7103ec06858bba9d059ad5bf1e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:aa:27:f4:b7:ce:cd:46:5c:44:bf:aa:e4:
ff:31:e0:07:62:80:ab:2c:12:5f:2f:14:41:47:28:
0a:27:d7:23:71:f7:90:40:ac:26:c2:1c:96:1e:d0:
de:6c:ab:30:1b:e7:9e:4a:9f:a8:1d:55:8f:17:7a:
71:7d:1f:c1:c2:a1:56:85:a5:bc:db:38:f6:27:90:
e2:ff:04:96:89:c5:01:f5:98:d6:fd:86:3d:8c:1d:
96:9a:0f:3c:ce:e3:d3:2b:74:15:a3:cd:f0:ff:3c:
5f:fc:15:9c:c2:d7:de:ea:c5:94:f8:e9:1c:ee:52:
be:94:05:7a:ff:db:16:2b:94:8b:6d:d3:a1:53:9e:
ad:22:07:fc:72:6f:61:6f:ee:cb:b4:a7:ff:ad:27:
56:c3:93:d4:41:72:40:3d:58:a8:e8:08:d5:e6:10:
17:0e:04:2a:d8:fc:bf:7a:79:43:42:eb:24:2f:b3:
52:36:9f:b2:fc:1b:8a:3c:09:d0:9b:c5:50:59:fe:
6b:7d:16:0a:bb:c1:27:e7:7c:7a:77:46:90:78:6e:
da:7a:9c:05:81:4a:64:6b:23:59:bc:f6:2e:9b:47:
fc:65:01:c6:ed:57:13:7a:8a:dd:df:48:f5:cd:4d:
65:65:a3:0c:f7:2e:56:2c:14:c1:21:34:c0:6d:1f:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:18:95:0A:CD:71:03:EC:06:85:8B:BA:9D:05:9A:D5:BF:1E:08
X509v3 Authority Key Identifier:
keyid:81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/dp4YlQrNcQPsBoWLup0FmtW_Hgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d44::/64
2001:678:d44:200::/64
2001:678:d44:300::/64
Signature Algorithm: sha256WithRSAEncryption
76:44:7e:ab:86:92:95:da:91:ed:90:e8:05:0c:3f:a2:7e:f1:
39:5f:fd:fd:58:cb:d6:4b:83:89:a1:9a:80:a9:9f:4f:ee:be:
97:26:3a:72:c8:73:29:d8:11:16:68:04:4b:fe:76:da:a0:ed:
2e:e8:6f:e0:88:c6:31:d9:6a:12:de:69:e7:1d:c2:93:e9:8c:
d9:ce:51:cf:3c:1c:c5:f1:0e:f5:d1:2e:d5:de:95:19:cd:ff:
b0:78:fd:3e:6a:47:37:c5:f2:8c:39:36:b5:20:b3:19:36:0e:
6d:07:78:27:3e:84:52:5b:ca:90:8d:ab:e9:46:e8:fe:5c:07:
a6:60:1b:30:6a:59:1f:46:06:6b:6e:36:02:7d:1e:0e:48:bd:
c5:e8:be:33:53:01:dc:6b:a0:20:d8:9a:fb:4d:9c:59:14:49:
b9:8b:a2:34:cc:59:12:c4:6a:9e:95:d2:80:93:8f:49:b6:ae:
8b:76:ce:38:b5:98:84:50:3c:e9:c5:64:ed:75:a8:ea:76:e8:
f0:c8:f9:b2:f7:40:a4:45:f5:33:d6:15:7f:de:e1:2a:b7:a2:
e6:c4:b1:d2:10:c9:d7:56:23:2c:05:01:ba:bc:b7:a0:5f:02:
ea:9b:c3:b5:f3:52:20:46:72:23:3d:c1:6e:7d:8b:4d:9d:9c:
0f:06:65:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:12 2024 by rpki-client on console-fra.rpki-client.org